Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
File:                     nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft (raw, json)
Hash identifier:          6h5IMYsKWsffxQ9azZllinOa0/jkkE5mDqX5IH7qGLg=
Subject key identifier:   FD:93:09:B4:A2:71:12:3E:02:71:1A:B4:34:E3:68:BC:46:D1:50:BC
Authority key identifier: 9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
Certificate issuer:       /CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Certificate serial:       0193572DD9F6C60B279B9C848FF5C66E924A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
Manifest number:          0B04
Signing time:             Sat 23 Nov 2024 04:00:42 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:42 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:42 +0000
Files and hashes:         1: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl (hash: qQF5wTxevpBKV+kOf2MwKLd8im5hOou3R+4HTYGKrbg=)
                          2: rk9wzvJwKeGoF8sLrsXJ2XjbWJo.roa (hash: ttEFGCQvNbQcAbflPYvT/MtBoq6tZfy0QGawkTaa12s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:d9:f6:c6:0b:27:9b:9c:84:8f:f5:c6:6e:92:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
        Validity
            Not Before: Nov 23 04:00:42 2024 GMT
            Not After : Nov 24 04:00:42 2024 GMT
        Subject: CN=fd9309b4a271123e02711ab434e368bc46d150bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2c:ee:3d:0f:79:37:00:5d:47:45:21:5f:3d:
                    af:16:54:b6:41:31:d0:60:a3:c7:38:3e:62:ed:0c:
                    5d:9d:ea:b5:27:9a:9b:fa:57:18:52:4a:a8:38:cf:
                    ba:82:9c:76:d8:14:94:e2:e7:f8:22:21:93:50:06:
                    dc:87:df:3e:a7:a7:2e:46:1c:55:aa:87:0a:3c:aa:
                    4a:f1:e0:83:92:7b:cd:eb:21:3c:64:e4:82:f3:48:
                    3c:ee:c2:ef:f2:c8:39:68:ad:1b:9f:aa:05:4b:ae:
                    33:b5:56:01:7b:90:58:58:9b:fb:3d:f5:a3:f4:bc:
                    66:73:d3:2c:39:11:87:fc:bc:fb:cf:48:ce:f2:92:
                    cb:be:3f:57:d0:f8:34:3b:30:e7:d1:41:a4:a7:94:
                    d5:10:63:1f:db:e4:55:f3:11:eb:9e:6f:5d:7f:b7:
                    78:ac:9a:71:b7:63:f5:1e:73:1f:e7:fc:ea:0a:79:
                    98:a8:c9:7e:7b:b8:83:aa:96:39:df:a7:96:52:05:
                    e4:7a:d4:9e:1e:d7:3d:d1:ad:db:fa:e3:b9:3c:a8:
                    14:91:b0:e0:46:cc:56:d7:97:8e:1b:b5:b9:66:1f:
                    63:24:93:e7:1c:d5:61:dd:86:ef:5b:97:f4:af:33:
                    d4:7a:bd:5a:21:05:36:be:a3:69:db:a1:d7:0f:77:
                    df:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:93:09:B4:A2:71:12:3E:02:71:1A:B4:34:E3:68:BC:46:D1:50:BC
            X509v3 Authority Key Identifier:
                keyid:9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ab:c9:06:95:22:e8:e3:fb:90:1f:6f:06:c7:bf:5e:40:c8:
         e9:87:c3:bc:bb:f4:1c:a5:dc:92:bb:e0:03:41:40:5f:da:e2:
         b8:d9:c1:a2:ac:96:5d:3a:1d:00:e0:4e:4a:f9:19:a0:f9:03:
         a8:bc:b5:ff:0d:01:2b:ef:d1:cd:fe:c8:69:c3:a5:75:d6:fd:
         40:0a:a3:0f:9d:2b:c9:13:eb:61:64:23:59:b2:c4:de:85:bb:
         f4:e1:25:6d:dd:eb:76:82:4d:dd:e5:f3:4a:ce:0f:e4:a4:ae:
         d6:d6:93:b8:3e:b1:c5:a2:a9:b6:a2:a6:b6:d0:c4:45:ab:13:
         73:a3:11:4b:96:40:07:8f:cf:51:00:bb:12:15:88:91:ad:87:
         fe:71:77:ea:0c:c6:df:0e:a4:9f:f1:6a:7d:27:0e:f5:f0:72:
         92:78:e1:57:ad:d9:46:15:6d:e4:7c:59:ec:9e:64:66:39:c5:
         85:2d:ea:61:24:4c:37:f7:20:d1:85:a8:bf:fc:80:87:87:8c:
         f7:f1:45:a6:9f:7c:81:ab:25:2c:c2:06:ee:89:a3:f0:09:96:
         11:ed:e3:03:2f:82:d9:8f:51:fb:dd:48:3a:eb:6d:b2:37:11:
         97:3e:60:d7:11:7f:bf:b5:34:7d:a2:4e:b0:69:25:b6:19:9d:
         28:00:85:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:24 2024 by rpki-client on console-ams.rpki-client.org